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IN THE CLAIMS 

1. (Currently Amended) A system for distributing a content, comprising: 

an identification certificate issued by an identification authority containing a template 
serving as identification data of a user receiving a conten t, said template including at least one 
piece of personal bio tic information or personal non-biotic information ; 

container information in which a content transaction condition is set including an 
identification certificate identifier list associating with said identification certificate; 

a content key for enciphering a content; 

a secure container including the content enciphered with the content key and said 
container information; 

a content distributor for distributing the content by moving said secure container; 

at least one user device for transacting the content with said content distributor; 

whereby user authentication is performed in accordance with the identification certificate 
identified on the basis of the identification certificate identifier list when said secure container is 
moved, so that the content usable on said user device is distributed with content transaction 
managed. 

2. (Original) A system for distributing a content according to Claim. 1, wherein said 
identification certificate is issued by an identification authority, third party organization. 

3. (Original) A system for distributing a content according to Claim. 1, wherein said 
container information further includes data in which the condition of secondary distribution is 
set, the secondary distribution redistributing the content after first distribution. 

4. (Original) A system for distributing a content according to Claim. 1, wherein said 
content distributor is a service provider distributing said secure container, the service provider 
authenticating a user of said user device receiving said secure container through comparing the 
template contained in said identification certificate identified on the basis of the identification 
certificate identifier list with sampling information input by the user, subsequently allowing the 
content to be used on said user device, provided that the user has been authenticated. 
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5. (Original) A system for distributing a content according to Claim. 1, wherein said 
content distributor is a service provider distributing said secure container, and the service 
provider authenticates a user of said user device receiving said secure container by comparing 
the template contained in said identification certificate identified on the basis of the identification 
certificate identifier list with sampling information input by the user, subsequently distributing 
said content key with which the content contained in said secure container was enciphered, 
provided that the user has been authenticated. 

6. (Original) A system for distributing a content according to Claim. 1, wherein said 
content distributor is a service provider distributing said secure container, and said user device 
receiving said secure container authenticates a user thereof by comparing the template contained 
in the identification certificate identified on the basis of the identification certificate identifier list 
with sampling information input by the user, subsequently informing the service provider of the 
user authentication result, and thus the service provider allows the content to be used on said user 
device, provided that the user has been authenticated. 

7. (Original) A system for distributing a content according to Claim. 1, wherein said 
content distributor is a service provider distributing said secure container, and said user device 
receiving secure container authenticates a user thereof by comparing the template contained in 
the identification certificate identified on the basis of the identification certificate identifier list 
with sampling information input by the user, subsequently informing the service provider of the 
user authentication, thereby the service provider distributing to said user device said secure 
container and said content key with which the content contained in said secure container was 
enciphered, provided that the user has been authenticated. 

8. (Original) A system for distributing a content according to Claim. 1, wherein said 
content distributor is a service provider and said at least one user device comprises a plurality of 
user devices, and said identification certificate is previously contained in the service provider or 
a user device that is to perform the user authentication, said identification certificate being to be 
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used for user authentication performed when said secure container is moved between the service 
provider and a user device and between user devices. 

9. (Original) A system for distributing a content according to Claim. 1, wherein said 
content distributor is a service provider and said at least one user device comprises a plurality of 
user devices, and said identification certificate is acquired from an identification authority, 
identification certificate issuer, by the service provider or a user device that is to perform the user 
authentication, the identification certificate being to be used for user authentication performed 
when the secure container is moved between the service provider and a user device and between 
user devices. 

10. (Original) A system for distributing a content according to Claim. 1, wherein said 
container information further includes data for permitting content use including reproduction and 
copying, thereby allowing said user device receiving the secure container to use the content 
under the restriction of content use in accordance with the data for permitting content use. 

11. (Original) A system for distributing a content according to Claim. 1, wherein said 
secure container further includes a digital signature provided by a secure container producer. 

12. (Original) A system for distributing a content according to Claim. 1, wherein the 
identification certificate identifier list includes data associating an identifier of a content user 
with a identification certificate identifier of the user. 

13. (Original) A system for distributing a content according to Claim. 1, wherein said 
content distributor is a service provider and said at least one user device comprising a plurality of 
user devices, each of the service provider and the user devices performing content transaction 
having an encryption processing unit, and the user devices authenticate one another when data 
are transmitted therebetween, subsequently a data-transmitting user device generating a digital 
signature to data to be transmitted, a data-receiving user device verifying the digital signature. 
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14. (Currently Amended) A system for distributing a content according to Claim. 1 , 
wherein the template includes at least one piece of information selected from among personal 
biotic information including fingerprint information, retina pattern information, iris pattern 
information, voice print information, and handwriting information and a non-biotic information 
including a seal, a passport, a driver's license, and a identification card or any combination of the 
biotic and non-biotic information and a password. 

1 5 . (Currently Amended) A method of distributing a content, comprising: 

the step of distributing a content by moving a secure container including the content 
enciphered with a content key and container information in which a content transaction condition 
is set including an identification certificate identifier list associating with an identification 
certificate containing a template serving as identification data of a user to which a content is 
distributed; said identification certificate being issued by an identification authority, and said 
template including at least one piece of personal biotic information or personal non-biotic 
information ; and 

the step of performing user authentication in accordance with the identification certificate 
identified on the basis of the identification certificate identifier list when the secure container is 
moved to distribute the content, 

whereby the content usable on a user device is distributed with content transaction 
managed. 

16. (Original) A method of distributing a content according to Claim. 15, wherein the 
identification certificate is issued by an identification authority, third party organization. 

17. (Original) A method of distributing a content according to Claim. 15, wherein the 
container information includes data in which the condition of secondary distribution is set, the 
secondary distribution redistributing the content after first distribution. 

18. (Original) A method of distributing a content according to Claim. 15, wherein, in 
said step of performing user authentication, a service provider distributing a secure container 
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compares the template contained in the identification certificate identified on the basis of the 
identification certificate identifier list with sampling information input by a user of a secure 
container receiving device, thereby authenticating the user, and said method further comprises: 

the step in which the service provider allows a content to be used on the secure container 
receiving device, provided that the user has been authenticated. 

19. (Original) A method of distributing a content according to Claim. 15, wherein, in 
said step of performing user authentication, a service provider distributing the secure container 
compares the template contained in the identification certificate identified on the basis of the 
identification certificate identifier list with sampling information input by a user of a secure 
container receiving device, thereby authenticating the user, and said method further comprises: 

the step in which the service provider distributes the content key with which the content 
contained in the secure container was enciphered, provided that the user has been authenticated. 

20. (Original) A method of distributing a content according to Claim. 15, wherein, in 
said step of performing user authentication, a user device receiving secure container 
authenticates a user thereof by comparing the template contained in the identification certificate 
identified on the basis of the identification certificate identifier list with sampling information 
input by the user, and said method further comprises: 

the step in which the user device informs the service provider distributing the secure 
container of the user authentication according to said step of performing user authentication; and 

the step in which the service provider allows the content to be used on the secure 
container receiving device, provided that the user has been authenticated. 

21. (Original) A method of distributing a content according to Claim. 15, wherein, in 
said step of performing user authentication, a user device receiving the secure container 
authenticates a user thereof by comparing the template contained in the identification certificate 
identified on the basis of the identification certificate identifier list with sampling information 
input by the user, and said method comprises: 
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the step in which the user device informs the service provider distributing the secure 
container of the user authentication according to said step of performing user authentication; 

the step in which the service provider distributes the secure container to the user device, 
provided that the user of the user device has been authenticated; and 

the step in which the service provider distributes the content key with which the content 
contained in the secure container was enciphered, provided that the user of the user device has 
been authenticated. 

22. (Original) A method of distributing a content according to Claim. 15, wherein the 
identification certificate which is to be used for user authentication performed when the secure 
container is moved between a service provider and a user device and between user devices is 
previously contained in the service provider or a user device that is to perform the user 
authentication. 

23. (Original) A method of distributing a content according to Claim. 15, wherein the 
identification certificate which is to be used for user authentication performed when the secure 
container is moved between a service provider and a user device and between user devices is 
acquired from an identification authority, identification certificate issuer, by the service provider 
or a user device that is to perform the user authentication. 

24. (Original) A method of distributing a content according to Claim. 15, wherein the 
container information further includes data for permitting content use including reproduction and 
copying, thereby allowing a secure container receiving device to use the content under the 
restriction of content use in accordance with the data for permitting content use. 

25. (Original) A method of distributing a content according to Claim. 15, wherein each 
of the service provider and user devices transacting a content has an encryption processing unit, 
and said method further comprises: 

the step in which user devices authenticate one another when data are transmitted 
therebetween; 
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the step in which a data-transmitting user device generates a digital signature to data to be 
transmitted; and 

the step in which a data-receiving user device verifies the digital signature. 

26. (Currently Amended) An information processing apparatus for distributing a 
content by moving a secure container including a content enciphered with the content key and 
container information, in which a content transaction condition is set, including an identification 
certificate identifier list associating with an identification certificate containing a template 
serving as identification data of a user to which the content is distributed, said identification 
certificate being issued by an identification authority, and said template including at least one 
piece of personal biotic information or personal non-biotic information, said apparatus 
comprising: 

a section for performing user authentication through comparing the template contained in 
the identification certificate identified on the basis of the identification certificate identifier list 
with sampling information input by a user of a secure container receiving device; and 

a section for allowing the content to be used on the secure container receiving device, 
provided that the user has been authenticated. 

27. (Original) An information processing apparatus according to Claim. 26, further 
comprising a section for distributing the content key with which the content contained in the 
secure container was enciphered, provided that the user has been authenticated. 

28. (Currently Amended) An information processing apparatus for receiving a 
content by moving a secure container including a content enciphered with the content key and 
container information, in which a content transaction condition is set, including an identification 
certificate identifier list associating with an identification certificate containing a template 
serving as identification data of a user to which the content is distributed, said identification 
certificate being issued by an identification authority, and said template including at least one 
piece of personal biotic information or personal non-biotic information, said apparatus 
comprising: 
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a section for performing user authentication through comparing the template contained in 
the identification certificate identified on the basis of the identification certificate identifier list 
with sampling information input by a user thereof; and 

a section for informing a secure container distributor of the user authentication. 

29. (Currently Amended) A medium for providing a computer program for managing 
a content transaction to distribute a content usable on a user device, said program comprising: 

distributing a content by moving a secure container including a content enciphered with a 
content key and a container information in which a content transaction condition is set, the 
container information including an identification certificate identifier list associating with a 
identification certificate containing a template serving as identification data of a user receiving 
the content, said identification certificate being issued by an identification authority, and said 
template including at least one piece of personal biotic information or personal non-biotic 
information. 



